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Abstract 

There has been a great of work on characterizing the complexity of the satisfiability and 
validity problem for modal logics. In particular, Ladner showed that the validity problem 
for all logics between K, T, and S4 is PSPACE-complete, while for S5 it is NP-complete. 
We show that, in a precise sense, it is negative introspection, the axiom -<Kp => K-<Kp, 
that causes the gap. In a precise sense, if we require this axiom, then the satisfiability 
problem is NP-complete; without it, it is PSPACE-complete. 



1 Introduction 



There has been a great of work on characterizing the complexity of the satisfiability and validity 
problem for modal logics (see [Halpern and Moses 1992; Ladner 1977; Vardi 1989] for some 
examples of most interest here). In particular, Ladner [1977] showed that the validity problem 
for all logics between K, T, and S4 is PSPACE-complete, while for S5 it is NP-complete. 
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Research Initiative (MURI) program administered by the ONR under grant N000 14-01- 1-0795. The second 
author was also supported in part by a scholarship from the Brazilian Government through the Conselho Nacional 
de Desenvolvimento Cientifico e Tecnologico (CNPq). 
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An easy modification of his argument shows that it is NP-complete for KD45 as well. There 
has been followup work trying to understand what causes the gap between NP and PSPACE. 
Expressed in terms of epistemic reasoning, Vardi [1989] showed that, in a precise sense, the 
ability to combine distinct items of knowledge, as characterized by the axiom Kp A Kq =>• 
K(p A q), causes the gap; requiring this axiom gives PSPACE-completeness, while without 
it we get NP-completeness. We give another characterization. We show that, in a precise 
sense, it is negative introspection, the axiom -*Kp =^ K^Kp, that causes the gap. In a precise 
sense, if we require this axiom, then the satisfiability problem is NP-complete; without it, it is 
PSPACE-complete. 

More precisely, consider the following axioms and inference rules, all of which have been 
well-studied in the literature [Fagin, Halpern, Moses, and Vardi 1995]: 

Al. All tautologies of propositional calculus 

A2. (Kip A K(ip =>- ip)) =>■ Kip (Distribution Axiom) 

A3. Kp p (Knowledge Axiom) 

A4. Kp =>- KKip (Positive Introspection Axiom) 

A5. -iK(p K^Kp, (Negative Introspection Axiom) 

A6. -iK(false) (Consistency Axiom) 

Rl. From p and p ip infer ip (modus ponens) 

R2. From ip infer Kip, (Knowledge Generalization) 

The system K consists of Al, A2, Rl, and R2; the system T is K + A3; the system A4 is T + 
A4; the system S5 is S4 + A5; the system KD45 is S5 + A6 - A3. 

Consider any modal logic that includes Al, A2, Rl, R2 and some (possibly empty) subset 
of A3, A4, and A5. We show that the satisfiability for the resulting logic is NP-complete 
iff A5 is included; otherwise it is PSPACE-complete. While this result follows easily from 
well-known techniques, it does not seem to have been observed before. 

2 Modal Logic: A Brief Review 

We briefly review basic modal logic, introducing the notation used in the statement and proof 
of our result. The syntax of the modal logic is as follows: formulas are formed by starting 
with a set $ = {p, q, . . .} of primitive propositions, and then closing off under conjunction 
(A), negation (->), and the modal operator K. Call the resulting language As usual, 

we define ip V ip and ip =>- ip as abbreviations of ~^(^<p A -iip) and -up V ip, respectively. The 
intended interpretation of Kip varies depending on the context. It typically has been interpreted 
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as knowledge, as belief, and as necessity. Under the epistemic interpretation, Kip is read as 
"the agent knows ip"; under the necessity interpretation, Kp can be read "ip is necessarily true". 

The standard approach to giving semantics to formulas in Cf(&) is by means of Kripke 
structures. A tuple M = (S, ir, /C) is a Kripke structure (over if S is a set of states, n : 
S x $ — > {true, false} is an interpretation that determines which primitive propositions are 
true at each state, /C is a binary relation on S. Intuitively, (s, t) E /C if, in state s, state t is 
considered possible (by the agent, if we are thinking of K as representing an agent's knowledge 
or belief). For convenience, we define /C(s) = {t : (s,t) G /C}. 

Let denote the class of all Kripke structures over $ with no restrictions on the /C 

relation. Depending on the desired interpretation of the formula Kip, a number of conditions 
may be imposed on the binary relation /C. /C is reflexive if for all s E S, (s, s) E /C; it is 
transitive if for all s, t, w G 5, if (s, t) E IC and (t, -u) G /C, then (s, w) G /C; it is serial if 
for all s G 5 there exists t E S such that (s, t) E JC; it is Euclidean if for all s, t, w G 5, if 
(s, t) E K, and (s, u) E K. then (t, m) G /C. We use the superscripts r, e, t and s to indicate 
that the /C relation is restricted to being reflexive, Euclidean, transitive, and serial, respectively. 
Thus, for example, M rt (Q) is the class of all Kripke strutures where the /C relation is reflexive 
and transitive. 

We write (M, s) |= ip if ip is true at state s in the Kripke structure M. The truth relation is 
defined inductively as follows: 

(M, s) |= p, forp G if 7r(s,p) = true 

(M,s) |=^if(M,s) 

(M, s) \= ip Aip if (M, s) |= and (M, s) |= ^ 

(M, s) |= if ( M , t) h V 5 for a11 * such that (s, t) E K 

A formula ip is said to be satisfiable in Kripke structure M if there exists s E S such that 
(M, s) |= </?; p valid in M if (M, s) |= for all s E S. A formula is satisfiable (resp., va/ZJ) 
in a class Af of Kripke structures if it is satisfiable in some Kripke structure in M (resp., valid 
in all Kripke structures in A/"). 

There is a well-known correspondence between properties of the /C relation and axioms: re- 
flexivity corresponds to A3, transitivity corresponds to A4, the Euclidean property corresponds 
to A5, and the serial property corresponds to A6. This correspondence is made precise in the 
following theorem. 

Theorem 2.1: [Fagin, Halpern, Moses, and Vardi 1995] Let C be a (possibly empty) subset 
of {A3, A4, A5, A6} and let C be the corresponding subset of {r, t, e, s}. Then {Al, A2, 
Rl, R2} U C is a sound and complete axiomatization of the language with respect to 

.W r i<I»). 

3 The Result 

We can now state our main result. 



3 



Theorem 3.1: For C C {r,e,t,s}, the complexity of the problem of deciding if a formula 
(p G £f($) is satisfiable in M. c ($) is NP-complete if e G C, and is PSPACE-complete if 

e<£C. 

The theorem claimed in the introduction, namely, that the satisfiability problem for the log- 
ics discussed in the introduction is NP-complete iff A5 is an axiom, and otherwise is PSPACE- 
complete, follows immediately from Theorems 2.1 and 3.1. 

Proof: Much of the proof of Theorem 3.1 is known. In particular, the PSPACE hardness result 
in the case that e C follows from Ladner's results. Ladner proves the matching upper bound 
if C — (the system K), C = {r} (the system T), and C = {r, t} (the system S4). Since a 
reflexive relation is serial, Ladner's results deal with the cases C = {r, s} and C = {r, t, s} 
as well. It is straightforward to modify Ladner's argument to get PSPACE-completness in the 
remaining cases where e ^ C. For the cases where e G C, it is well known (and easy to 
show) that if a relation is reflexive and Euclidean, then it is symmetric, transitive, and serial, 
so M r,e = M r ' e,t = M r ' e,s = M r,e ' s,t . Since Ladner proves NP-completeness for S5, when 
the K, relation is an equivalence relation, NP-completeness in all these cases follows. NP- 
completeness in the case where C = {r, t} is proved in [Fagin, Halpern, Moses, and Vardi 
1995], using a slight modification of Ladner's techniques. We generalize these arguments to 
deal with the case that C = {e}. All the remaining cases actually follow from our argument. 

As usual, let \(p\ denote the length of (p when viewed a string of symbols. As in the proof 
of Proposition 3.6.2 in [Fagin, Halpern, Moses, and Vardi 1995], the key step in showing NP- 
completness lies in showing that a formula is satisfiable in M e iff it is satisfiable in a structure 
with few states of a particular type. This characterization (and its proof) is a generalization of 
analogous characterizations given in Propositions 3.1.6 and 3.6.2 in [Fagin, Halpern, Moses, 
and Vardi 1995] for satisfiability in M r,e,t and M e,s,t . 

Lemma 3.2: A formula if is satisfiable in M. e iff there exists some structure M such that 
(M, s ) \= <f, where M = ({s } U S U S', it, K), and (a) S and S' are disjoint sets of states; 
(b) 1/5 = then S' = 0, (c) JC(s ) = S; (d) /C(s) = S Li S' if s G S U S'; and (e) 

\{s }usus'\ < \<p\. 

Note that we may have s £ SUS'. However, if s G SLiS', then it follows from conditions 
(a), (c), and (d) that S' — 0. We get a characterization for 

• M es by requiring that S ^ 0; 

• M et by requiring that S' = 0; 

• M est by requiring that S' = and S ^ 0; 

• M re = M ret = M rest by requiring that s G S (so that, as we have observed, S' = 0). 
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The third and fourth characterizations are Proposition 3.1.6 in [Fagin, Halpern, Moses, and 
Vardi 1995]. 

Proof: Suppose that M is a structure of the type described in the statement of the lemma, 
(s,t) G /C, and (s,f) G K. Then t' G K,{t) = S U S', so K is Euclidean. It follows that 
M G M e . Thus, if (M, s ) |= (p, then <p is satisfiable in M e . 

For the converse, we proceed much as in the proof of Propositions 3.1.6 and 3.6.2 in [Fa- 
gin, Halpern, Moses, and Vardi 1995]. Suppose that M' = (T, tc', K!) G M e , s G T, and 
(M', s ) |= •p. Let F 1 be the set of subformulas of p of the form Kip such that (M 1 , s ) |= 
->Kip, and let F 2 be the set of subformulas of (p of the form Kip such that KKip is a subformula 
of ip and (M 1 , s ) |= -^KKip A Kip. (We remark that it is not hard to show that if M G M c 
where e and at least one of r or t is in C, then F 2 = 0.) 

For each formula Kip G Fi, there must exist a state s^ 1 G /C'(s ) such that (M', s^ 1 ) |= -i^. 
Note that if F x ^ then /C'(s ) ^ 0. Define J(s ) = {s } if s G /C'(s ), and I(s ) = 
otherwise. Let S = {sj 1 : Kip G F x } U J(s ). If Kip G F 2 then KKip G F x , so there must 
exist a state s^ 2 G fC'(s^) such that (M',s^ 2 ) |= -i^- Moreover, since (M', s ) |= it 
must be the case that sj 2 ^ /C'(s ). Let S" = {sj 2 : G F 2 }. By construction, S' and 5" 
are disjoint. Moreover, if S = 0, then F x = 0, so F 2 = and S" = 0. 

Let = {s }USUS'. Define the binary relation K, on S* by taking /C(s ) = 5 and 
/C(t) = S U S" for t G 5 U S". To show that this is well defined, we must show that (a) s i S' 
and that (b) if s G 5, then S" = 0. For (a), suppose by way of contradiction that s G S'. Thus, 
there exists s G S 1 such that s G IC'(s). By the Euclidean property, it follows that s G /C'(s ), 
a contradiction since S" is disjoint from /C'(s ). For (b), note that if s G 5, then s G /C'(so). 
It is easy to see that if s,s' G /C'(s ), then /C'(s) = /C'(s')- For if s, s' G /C'(s ) then, by 
the Euclidean property, s' G /C'(s). Thus, if t G IC'(s), another application of the Euclidean 
property shows that t G /C'(s'). Hence, /C'(s') C /C'(s). A symmetric argument gives equality. 
But now suppose that t G S'. Then, as we have observed, there exists some s G S such that 
t G IC'(s) - /C'(so). But if s G 5, then /C'(s) - /C'(so) = 0- Thus, S' = if s G 5. 

A similar argument shows that /C is the restriction of K,' to 5*. For clearly S' is disjoint 
from /C'(s ), so /C(s ) = /C'( s o) H 5*. Now suppose that s G 5 U S'. It is easy to see that there 
exists some s' G S such that s G /C'(s'). This is clear by construction if s G S". And if s G 5, 
then s G /C'( s o) and, by the Euclidean property, s G /C'(s). If t G 5 U 5", we want to show that 
t G /C'(s). Again, there exists some t' such that t' e S and t G /C'(t'). Since s'jt' G /C'(s ), 
by the Euclidean property, s' G K,'(t'). Since s',t G /C'(t'), the Euclidean property implies 
that t G /C'(s'). Since s,t G /C'(s'), yet another application of the Euclidean property shows 
that t G /C'(s). Thus, /C(s) C /C'(s) n 5*. To prove equality suppose that t G /C'(s) n 5*. If 
t E S Li S', then by definition t G /C(s). If t = s , then by the Euclidean property it follows 
that s G IC'(s ), so s G S* C /C(s). Thus, t G /C(s), as desired. 

Let M = (S*, 7r, /C), where 7r is the restriction of %' to {s }US'US". It is well known [Fagin, 
Halpern, Moses, and Vardi 1995] that there are at most \p\ subformulas of p. Since Fi and F 2 
are disjoint sets of subformulas of ip, form Kip, and at least one subformula of ip is a primitive 
proposition (and thus not of the form Kip), it must be the case that \F±\ + \F 2 \ < \<p \ — 1, giving 
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us the desired bound on the number of states. 

We now show that for all states s E S* and for all subformulas ip of (p (including (p itself), 
(M, s) |= ip iff (M', s) \= ip. The proof proceeds by induction on the structure of p. The only 
nontrivial case is when ip is of the form Kip'. If (M', s) |= Kip', then (M', t) \= ip' for all 
t E K'(t). Since K. is the restriction of KJ to S* , this implies that (M', t) \= ip' for all t E JC(s). 
Thus, by the induction hypothesis, (M, t) |= ip' for all t G /C(s); that is, (M, s) \= Kip'. For 
the converse, suppose that (M', s) |= -<Kip'. If it is also the case that (M', s ) |= ->Kip', 
then Kip' £ F ± . By the induction hypothesis, (M, sj}) |= -i^'. Thus, (M, s) |= ->Kip'. If 
(M', so) |= Kip', then standard arguments using the fact that JC' is Euclidean can be used to 
show (M', sq) \= -<KKip'. Thus, Kip' e F 2 , and (M, s^?) |= -i^' by the induction hypothesis. 
Again, it follows that (M, s) \= -^Kip'. I 

The proof of Theorem 3.1 in the case that C = {e} now follows easily. To check that 
(p is satisfiable in M e , we simply guess a structure of the form described in Lemma 3.2 and 
verify that it does indeed satisfy (p. (Verifying that the structure guessed does indeed satisfy cp 
is an instance of the model-checking problem, which is well known to be in polynomial time 
[Fagin, Halpern, Moses, and Vardi 1995]). Thus, the problem is in NP. The argument for the 
other cases with e e C follows by a straightforward modification of Lemma 3.2, as outlined 
just before the proof of the lemma. | 
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